Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/686c1e4e-f2a8-3262-b92c-d6f529177999.roa
File:                     686c1e4e-f2a8-3262-b92c-d6f529177999.roa (raw, json)
Hash identifier:          2KfcgBIIWDxZTGz9aCEKeuADJT6rTlBpXraPDbyTe1M=
Subject key identifier:   91:83:D1:49:4B:FD:72:D0:44:CB:00:E2:6C:47:DC:66:30:AE:55:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583E0380965B235D1B78945907C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/686c1e4e-f2a8-3262-b92c-d6f529177999.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        108.1.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:03:80:96:5b:23:5d:1b:78:94:59:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=2db7f3e1-97da-42b1-ab80-9bb860a4acc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:04:0e:c6:b5:70:f9:7d:9b:76:e5:86:d2:
                    08:b7:d3:6b:e4:15:2e:9c:cc:29:af:14:97:48:50:
                    e3:3b:d2:ae:d1:8d:f9:1e:20:26:8c:f3:0d:d5:d4:
                    64:2c:5f:d6:a1:7d:f1:05:d3:6b:dc:e3:9f:98:2a:
                    ee:25:26:91:7c:f4:4f:2d:89:88:aa:da:d2:e3:fb:
                    a7:b7:42:6e:d9:8c:81:0d:05:02:88:85:53:df:32:
                    2d:ed:23:05:e7:75:2a:8d:d3:09:13:04:fa:10:09:
                    af:e9:40:eb:23:15:27:f5:44:4c:7d:1b:83:87:03:
                    73:4c:1e:71:e4:44:e5:c9:d8:c3:29:4c:4c:d5:82:
                    d7:cd:c7:24:ce:d3:69:98:d2:da:a6:48:a9:e9:84:
                    f9:1d:ae:6c:4c:3e:f8:4f:46:d0:93:c8:d1:bb:fd:
                    06:72:78:d2:29:b4:a8:26:89:75:4e:bd:44:bb:e0:
                    fd:f7:fa:06:01:3a:be:df:75:b4:85:14:d2:f3:4f:
                    49:d8:a7:84:df:23:80:ee:15:91:27:6d:fd:5a:6b:
                    83:4a:6a:14:eb:52:da:fb:61:24:37:e0:67:ed:6a:
                    5d:08:37:a3:6a:52:4c:96:0a:a5:b3:df:9b:b3:0d:
                    d8:a2:96:81:09:e5:5f:fc:da:e6:38:07:77:84:a8:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:83:D1:49:4B:FD:72:D0:44:CB:00:E2:6C:47:DC:66:30:AE:55:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/686c1e4e-f2a8-3262-b92c-d6f529177999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.1.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:81:b6:22:bd:0f:ec:ef:46:7a:97:30:34:80:15:3d:71:a1:
         e9:f4:48:19:53:2e:0f:40:10:96:03:bb:8c:43:f2:81:cd:b4:
         82:a2:78:64:24:cb:e5:6c:eb:20:26:c9:41:1f:1b:fd:c1:5d:
         0b:0a:5c:77:8c:c5:88:89:d1:1c:f6:db:70:51:ee:58:f5:cc:
         99:64:fe:f3:a2:97:af:0f:24:6e:db:44:c2:31:ec:47:c6:da:
         a3:82:dd:df:bf:80:5f:cb:c4:7b:d2:b5:f4:9c:39:a1:aa:ed:
         d5:42:12:b2:7d:82:42:82:d0:54:6b:67:f9:d7:f4:3d:33:9a:
         f5:14:95:f3:68:66:c8:c5:43:02:72:2d:0c:95:c7:e7:8e:77:
         00:48:11:0a:10:14:51:ef:98:68:d5:b9:2f:00:9b:d8:65:47:
         eb:b2:87:32:7b:87:ac:e7:f0:96:14:2f:3d:87:01:f4:02:3e:
         d8:26:cf:8f:18:c6:79:f8:c7:84:c5:2c:aa:a5:0f:b3:17:c6:
         5e:00:ed:ed:fd:a4:bc:55:11:d8:c2:fd:eb:72:8f:28:10:d8:
         2f:22:4a:d5:41:a7:15:d1:1f:c6:49:70:ce:a0:5d:31:fa:65:
         1d:c7:2c:18:58:b7:cb:43:96:3e:89:a5:75:7e:8d:c0:10:9e:
         ac:5b:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----